The promise of no use : conditions for offering security assurances